nss selfserv and extended_master_secret

2020-03-19 Thread Brian Reichert
s-3.45-58.31.1.x86_64 under SLES 12 SP3. I acknowledge that I may be misinterpreting Wireshark, as I can find no example captures on the net of a Server Hello providing the extension. Is this an appropriate mechanism for testing for this feature? -- Brian Reichert BSD ad

Re: nss selfserv and extended_master_secret

2020-03-19 Thread Brian Reichert
o enable this? > Thanks, > Kevin -- Brian Reichert BSD admin/developer at large -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto

Re: nss selfserv and extended_master_secret

2020-03-19 Thread Brian Reichert
ut enableable. I have no idea what that mechanism might be. Anyway, I guess the next step is to engage the mod_nss people directly. I appreciate the pointers! > > Thanks, > Kevin -- Brian Reichert BSD admin/developer at large -- dev-tech-crypto mailing

Re: nss selfserv and extended_master_secret

2020-03-19 Thread Brian Reichert
On Thu, Mar 19, 2020 at 12:00:32PM -0400, Brian Reichert wrote: > On Thu, Mar 19, 2020 at 08:39:24AM -0700, Kevin Jacobs wrote: > > SSL_OptionSet with SSL_ENABLE_EXTENDED_MASTER_SECRET will do the trick, but > > I'm not aware of a config file option for this. > > &g

Re: nss selfserv and extended_master_secret

2020-03-19 Thread Brian Reichert
On Thu, Mar 19, 2020 at 02:34:19PM -0700, Kevin Jacobs wrote: > There is no other mechanism for enabling it. You would need to go the > modify/rebuild route, or build with NSS 3.48+. So I feared; I'm doing that very thing, as we speak, rolling a 3.48 RPM. > Thanks, > Kevin -